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Secure chip generates a first 
random number. 



Create a migratable keyblob using 
first random number, the migratable 
keyblob containing a key. 



Wrap the migratable keyblob with a 
public key of the key's parent key. 



Receive a pass phrase for a user of 
the key. 



Generate a pseudo-random number 
based on the pass phrase. 



Generate a third random number 
based on the first random number 
and the pseudo-random number. 



Store the third random number. 



Migrating the migratable keyblob 
from the computer with the secure 
chip to itself. 
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Scramble a key. 



TPM generates a first random number. 

XOR scrambled key with first random 
number to create migratable keyblob. 



Wrap the migratable keyblob using a 
public key of the key's parent key. 



Receive a pass phrase for a user of the 
key. 



Generate a pseudo-random number by 
hashing the pass phrase and applying a 
mass generation function to produce a 
string with the same length as the first 
random number. 



Generate a third random number by 
XOR'ing the first random number with 
the pseudo-random number. 



Store the third random number. 



Migrate the migratable keyblob from the 
computer with the TPM to itself. 
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